11027 matches found
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: CVE-2026-58049: incorrect validation in the RASC video decoder can lead to an out-of-bounds heap write and memory corruption bsc1269550. CVE-2026-64833: Out-of-Bounds Read via S/PDIF Muxer spdifenc.c bsc1272755. CVE-2026-64834: Infinite Loop Do...
USN-8750-1: FFmpeg vulnerabilities
Seung Min Shin discovered that FFmpeg did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service. CVE-2026-12706 Xinghang Lv discovered that FFmpeg did not correctly handle certa...
USN-8750-1 ffmpeg vulnerabilities
Seung Min Shin discovered that FFmpeg did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service. CVE-2026-12706 Xinghang Lv discovered that FFmpeg did not correctly handle certa...
EUVD-2026-77125
FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c...
EUVD-2026-77134
FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...
PT-2026-91456
Name of the Vulnerable Software and Affected Versions FFmpeg version 8.0.x Description A remote denial of service can be triggered through the manipulation of the duration or target duration arguments. This issue occurs within the parse playlist function located in the libavformat/hlsproto.c file...
CVE-2026-90816: Improper Resource Shutdown or Release
A vulnerability was found in FFmpeg 8.0.x. This affects the function parseplaylist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument duration/targetduration results in denial of service. The attack is possible to be carried out remotely...
CVE-2026-90815: Out-of-bounds Read
A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup3x3 of the file libavfilter/vfconvolution.c of the component Convolution Filter. Such manipulation leads to out-of-bounds read. The attack can be executed remotely. The exploi...
Linux Distros Unpatched Vulnerability : CVE-2026-52296
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c. CVE-2026-52296 Note th...
Ubuntu 20.04 LTS / 22.04 LTS : FFmpeg vulnerabilities (USN-8750-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8750-1 advisory. Seung Min Shin discovered that FFmpeg did not correctly handle certain memory operations. If a user or automated system were tricked into...
RHEL 9 : RHEL AI 3.4 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:67309)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67309 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...
RHEL 9 : RHEL AI 3.3 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:67276)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67276 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...
Linux Distros Unpatched Vulnerability : CVE-2026-52297
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...
PT-2026-91445
Name of the Vulnerable Software and Affected Versions FFmpeg versions 4.4.6 and earlier FFmpeg versions 5.1.8 and earlier FFmpeg versions 6.1.4 and earlier FFmpeg versions 7.1.3 and earlier FFmpeg versions 8.0.1 and earlier Description A remote attack can trigger an out-of-bounds read within the...
RHEL 9 : RHEL AI 3.5 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:67303)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67303 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to improper handling of padding in the extradata allocation process within WMA encoding. An attacker can cause a denial of service by triggering an out-of-bounds read through specially crafted input data...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the MOV parsing in movreadiacb due to insufficient padding of extradata. An attacker can cause a denial of service by triggering an out-of-bounds read when processing specially crafted MOV files. Remediation Upgrad...
DEBIAN-CVE-2026-52296
FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c...
